$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: nE3CJUVrJ6/m9McokjKHnhF2sjhEe8Qdk6CbnQ/2Lko= Subject key identifier: 5F:D5:53:0F:2B:26:64:4A:31:D8:7B:23:F4:E9:3F:3B:25:B1:81:03 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 04:47:32 +0000 Manifest this update: Mon 03 Nov 2025 04:47:31 +0000 Manifest next update: Mon 10 Nov 2025 04:47:31 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: Kd86Hmbnxr5QNMSozxGUrG1UMDdKD43brKT1/31va90=) 2: 5B7DA256ACCB11F08E05C84AC4F9AE02.roa (hash: JIk04y36avfxNyJYsMCYG62Md4+/wx7B5wlEtJd+Sg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Nov 3 04:47:31 2025 GMT Not After : Nov 10 04:47:31 2025 GMT Subject: CN=690833e3-8753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:fa:5e:ab:16:6b:24:5a:94:8a:4f:62:09: 4f:bf:d9:f0:98:b8:8b:5e:c8:f5:67:7e:bf:b5:b0: 89:52:8d:92:ab:3e:a0:50:e4:f2:a2:3a:08:2f:fa: 72:ce:b9:f6:b4:68:66:90:12:3d:6e:ae:ad:8c:39: 0f:4a:9b:08:51:9c:07:f0:7b:a1:76:89:0e:b1:e4: f2:df:94:8b:54:f5:6a:da:25:9d:d1:d2:cb:4e:fc: 70:8d:06:5e:98:f0:86:81:0f:ea:7c:18:d5:35:69: 85:ee:b1:fc:2e:61:7a:45:d8:3c:f4:b5:9e:31:2a: ee:ad:74:c6:48:ff:c0:d6:81:71:6c:0a:c6:12:cf: 2f:6f:be:ad:d5:58:1d:6c:43:56:18:48:f5:5f:b6: af:d3:79:cb:ca:2a:96:a5:26:b4:d2:0e:04:ed:68: 06:2f:7c:79:75:5e:5f:1d:cd:f8:67:a0:38:14:1b: 77:3a:54:f1:f9:e0:1a:6a:3c:55:1a:21:ee:c2:eb: c5:bd:ff:04:39:d0:97:81:ce:f5:57:fe:91:b5:15: 53:6d:b2:fd:59:c1:67:ef:2d:3b:58:0b:01:26:3c: 3d:1b:d7:ba:fd:fb:30:4f:e3:bd:4e:ae:45:11:48: bd:8e:fc:2a:b5:89:96:34:7f:76:3f:db:68:5f:fa: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:53:0F:2B:26:64:4A:31:D8:7B:23:F4:E9:3F:3B:25:B1:81:03 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ee:0c:64:68:1b:f8:db:75:26:c8:0f:73:8b:94:02:b9:a8: e2:11:71:d0:dc:07:dc:d2:ed:6e:65:57:b4:2d:be:d0:f2:95: 46:20:91:41:5b:1e:6c:c9:42:50:53:0a:5c:0b:b0:71:39:5a: 31:09:df:f3:7e:da:6a:f8:20:da:c9:42:db:a0:c8:b2:c9:72: b5:77:f7:a9:03:11:c0:87:e5:d0:0b:3b:23:28:b7:4a:b2:56: 14:18:da:ca:96:e1:ad:14:2c:36:a6:f5:5d:eb:74:d8:6d:a8: 4c:2b:cd:ec:e1:2d:aa:9a:58:0d:c6:85:d2:d9:52:c2:c2:1f: 5b:de:61:9e:aa:b9:6e:a3:02:f5:2a:60:f8:99:8f:a7:6a:9e: fd:15:b7:6f:1d:3d:53:c4:c1:2b:ff:26:f4:cb:e0:ab:48:5d: b6:7b:17:f0:df:61:38:a0:17:35:a4:f4:33:71:4b:85:1a:07: 91:d5:22:79:33:d7:99:ea:48:05:6a:4d:53:92:c3:62:89:68: 6f:a2:56:d1:a2:b3:4d:2d:c5:e7:48:7d:76:3b:38:7f:56:4a: e0:08:0e:15:57:72:99:3e:07:4c:99:84:cb:52:bd:39:79:9b: 82:56:8a:ba:7f:53:e9:62:47:b2:bb:2e:0e:df:b7:a8:fa:51: 8b:ea:fa:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUxMTAzMDQ0NzMxWhcNMjUxMTEwMDQ0NzMxWjAYMRYwFAYD VQQDEw02OTA4MzNlMy04NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaT6XqsWayRalIpPYglPv9nwmLiLXsj1Z36/tbCJUo2Sqz6gUOTyojoIL/py zrn2tGhmkBI9bq6tjDkPSpsIUZwH8HuhdokOseTy35SLVPVq2iWd0dLLTvxwjQZe mPCGgQ/qfBjVNWmF7rH8LmF6Rdg89LWeMSrurXTGSP/A1oFxbArGEs8vb76t1Vgd bENWGEj1X7av03nLyiqWpSa00g4E7WgGL3x5dV5fHc34Z6A4FBt3OlTx+eAaajxV GiHuwuvFvf8EOdCXgc71V/6RtRVTbbL9WcFn7y07WAsBJjw9G9e6/fswT+O9Tq5F EUi9jvwqtYmWNH92P9toX/qi8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/VUw8r JmRKMdh7I/TpPzslsYEDMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr7gxkaBv423UmyA9zi5QCuajiEXHQ3Afc0u1uZVe0Lb7Q8pVGIJFB Wx5syUJQUwpcC7BxOVoxCd/zftpq+CDayULboMiyyXK1d/epAxHAh+XQCzsjKLdK slYUGNrKluGtFCw2pvVd63TYbahMK83s4S2qmlgNxoXS2VLCwh9b3mGeqrluowL1 KmD4mY+nap79FbdvHT1TxMEr/yb0y+CrSF22exfw32E4oBc1pPQzcUuFGgeR1SJ5 M9eZ6kgFak1TksNiiWhvolbRorNNLcXnSH12Ozh/VkrgCA4VV3KZPgdMmYTLUr05 eZuCVoq6f1PpYkeyuy4O37eo+lGL6vr8 -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:45 2025 by rpki-client